Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: cnviliMTeakFzeZyLk/MeVjsC5wwz757zxidgn0gIGQ=
Subject key identifier: A4:E2:86:D4:66:F5:E7:C9:45:30:97:A1:0A:F1:FA:6E:4A:81:E9:86
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01974B8DB6433EE999ED3FAE4EA11338E2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: C3
Signing time: Sat 07 Jun 2025 18:01:07 +0000
Manifest this update: Sat 07 Jun 2025 18:01:07 +0000
Manifest next update: Sun 08 Jun 2025 18:01:07 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: 50+VQkirAFe0JkAUDJkSQpXpjs0l6YHzA8IcHyvIgW4=)
2: g2CXKA0Q172jL1FvPLyV_ep5ju0.roa (hash: 11gRkpCQE+58w0mcA/1mDxt2mYAAWr8ch94H20jZvcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:b6:43:3e:e9:99:ed:3f:ae:4e:a1:13:38:e2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jun 7 18:01:07 2025 GMT
Not After : Jun 8 18:01:07 2025 GMT
Subject: CN=a4e286d466f5e7c9453097a10af1fa6e4a81e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:a6:e6:8f:03:0f:4a:5a:86:92:e2:29:cd:
a2:68:d0:c1:16:ff:da:6f:dd:8b:3d:fb:9a:b7:5a:
71:a1:71:f5:4b:42:41:87:06:ab:7e:59:62:82:ab:
36:a7:26:65:8d:d4:c6:a5:fc:e1:00:67:4c:f4:8c:
53:75:d6:31:46:74:07:06:0e:09:83:08:05:40:b8:
61:2d:8a:ba:b9:2f:5f:61:37:5f:12:b1:7a:6b:6a:
e1:4f:9d:7f:05:9c:19:59:9c:5c:18:cd:dd:e1:7a:
06:11:ae:6f:7b:23:86:6e:e0:73:40:e3:5e:4b:dd:
c0:85:86:ee:1c:2f:b6:f7:e4:27:67:51:29:b8:7a:
af:40:ab:af:ce:20:56:4d:4f:e9:bd:8a:f7:ba:b1:
73:c7:6b:e7:aa:a3:8c:bf:ca:23:a3:ac:ff:90:10:
10:fc:e9:c6:56:57:ba:27:e0:8e:a0:91:da:5c:a4:
9c:a8:7e:58:a2:87:ae:c9:db:cc:ec:44:4a:22:86:
16:a3:12:d8:24:19:c7:73:35:7c:67:06:b2:65:4e:
5c:5e:40:b5:48:23:6b:85:b4:1d:6b:76:a1:bc:d1:
b9:4d:c0:18:62:b0:52:f6:10:13:ee:16:f7:73:da:
55:13:28:f4:10:9b:57:e0:bc:c2:1d:f1:ad:e1:0e:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:86:D4:66:F5:E7:C9:45:30:97:A1:0A:F1:FA:6E:4A:81:E9:86
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5c:79:08:ff:cd:1e:b4:9f:6e:37:9f:bf:d1:20:72:db:10:
93:a6:4b:58:98:33:41:36:e4:41:77:6e:5b:86:7e:30:be:74:
15:be:7b:ad:2a:fc:ec:32:d7:5c:eb:52:1f:c0:bc:6f:3b:35:
38:88:7a:b9:f3:5a:09:5e:2c:6d:ff:c5:17:85:63:76:8e:8c:
59:d6:1e:aa:03:54:b3:82:23:02:ae:47:78:23:a2:98:19:4b:
ef:aa:7a:9e:07:2f:dc:83:47:1b:a5:e6:55:00:94:02:fb:6d:
7a:ca:09:8a:e3:ff:68:d0:5e:32:d8:07:85:26:43:9f:88:51:
b9:a2:1e:eb:40:a6:45:45:85:e0:67:6b:24:23:ff:9d:53:e0:
ae:1f:bf:a5:c6:54:72:60:5a:e2:96:46:14:38:b6:81:ff:29:
d4:f6:ea:b5:03:b3:c1:09:1f:96:67:48:eb:e7:fe:97:c2:96:
52:2b:0a:f1:8e:20:ff:9a:c8:da:ac:90:9d:e6:87:9b:40:37:
34:4b:59:ad:8e:be:4c:68:9c:4d:f6:0a:9b:36:b5:f6:e2:54:
d0:77:07:04:d2:39:04:96:4d:fa:e9:9a:39:7b:e1:0d:98:b3:
49:f5:59:41:3a:9a:8a:2e:eb:53:62:92:e9:ce:8c:27:4a:bd:
f0:a3:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:25 2025 by rpki-client